#### A "professional" attack { #a-professional-attack }

Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And they would get just one extra correct letter at a time.

But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

        }).renderWith(data -> {
            registerLabels(data);
        });
    }

    /**
     * Shows the form for editing an existing elevate word.
     *
     * @param form edit form containing the elevate word ID
     * @return HTML response for the edit elevate word form
     */
    @Execute
    @Secured({ ROLE })
    public HtmlResponse edit(final EditForm form) {

        super();
    }

    /**
     * The unique identifier of the elevate word configuration being edited.
     * This is a required field for identifying which elevate word entry to update.
     */
    @Required
    @Size(max = 1000)
    public String id;

    /**
     * The username of the user who last updated this elevate word configuration.
     * Used for audit trail purposes to track who made changes.
     */

{* ../../docs_src/openapi_webhooks/tutorial001.py hl[9:13,36:53] *}

The webhooks that you define will end up in the **OpenAPI** schema and the automatic **docs UI**.

/// info

The `app.webhooks` object is actually just an `APIRouter`, the same type you would use when structuring your app with multiple files.

///

By default, **FastAPI** would automatically convert that return value to JSON using the `jsonable_encoder` explained in [JSON Compatible Encoder](../tutorial/encoder.md){.internal-link target=_blank}.

Then, behind the scenes, it would put that JSON-compatible data (e.g. a `dict`) inside of a `JSONResponse` that would be used to send the response to the client.

        dst[dstIndex] = (byte) (byteCount & 0xFF);
        dstIndex++;
        dst[dstIndex++] = (byte) (byteCount >> 8 & 0xFF);
        dstIndex += byteCount;

        /* Normally, without intervention everything would batch
         * with everything else. If the below clause evaluates true
         * the andx command will not be written and therefore the
         * response will not read a batched command and therefore

* [stable] You can now customize the iSCSI initiator name per volume in the iSCSI volume plugin.

* [stable] You can now specify the World Wide Identifier (WWID) for the volume identifier in the Fibre Channel volume plugin.

* [beta] Reclaim policy in StorageClass

                        .result());
    }

    // GET /api/admin/elevateword/{id}
    /**
     * Retrieves a specific elevate word setting by ID.
     *
     * @param id the ID of the elevate word to retrieve
     * @return JSON response containing the elevate word configuration
     */
    @Execute
    public JsonResponse<ApiResult> get$setting(final String id) {

    }

    /**
     * Gets a bad word by its ID.
     * @param id The bad word ID.
     * @return Optional entity containing the bad word if found.
     */
    public OptionalEntity<BadWord> getBadWord(final String id) {
        return badWordBhv.selectByPK(id);
    }

    /**
     * Stores (inserts or updates) a bad word.
     * @param badWord The bad word to store.
     */

                    final AnalyzeToken token = tokens.get(i);
                    final String word = token.getTerm();
                    if (StringUtil.isBlank(word)) {
                        continue;
                    }
                    final String[] words = { word };
                    final String[][] readings = new String[words.length][];
                    final List<String> l;